In May 2025, the UK’s Legal Aid Agency (LAA) discovered a major data breach. However, the full scope of the incident was not known then. The agency stated that most of the exfiltrated data related to applications and claims that were dated between January 2007 and 16 May 2025.

In an update published on Wednesday, the LAA said continuing forensic analysis discovered more data was accessed than initially believed. The former has disclosed that around 250,000 leaked records were dated before 2007.

An update published this week stated “The overwhelming majority of these are from the 1990s and 2000s, with only a fractionally small number dating from before 1990. The earliest record currently verified dates from 1978.”

As per LAA, it has no evidence that the exfiltrated data has been placed in the public domain or sold. Compromised data associated with legal aid applicants and recipients may include names, addresses, dates of birth, National Insurance Numbers, postcodes, case reference numbers, phone numbers, and other types of details.

The cyberattackers also exfiltrated data related to legal aid practitioners who interacted with LAA, including contracts, schedules, office locations, payment details, and user account credentials. Other affected persons include judges, solicitors, advocates, and individuals who managed pay point locations.

The agency stated “Since the incident, specialist technical and data teams have undertaken extensive work to understand what information the attackers accessed and exfiltrated.”

SOURCES:-

https://www.securityweek.com/uk-legal-aid-agency-hack-scope-widens-after-forensic-review/

https://tech-insider.org/uk-legal-aid-agency-hack-scope-widens-2026/

https://shattered.io/uk-legal-aid-agency-hack-250000-records-1978-2026/

https://therecord.media/uk-legal-aid-cyberattack-data

https://www.civilserviceworld.com/professions/article/legal-aid-agency-data-breach-compromised-data-goes-back-to-1978